Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
File:                     FivG9rrBQqA6uxp62RaQaD8DpNw.mft (raw, json)
Hash identifier:          1pz6oS5CMKpbhj13+i2YvKFzb4ctkma3ccmH3FWfUwY=
Subject key identifier:   71:4E:00:90:64:7D:09:67:43:F0:77:87:19:AE:0A:B1:A9:73:FC:9E
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Certificate issuer:       /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial:       01A10F5EF8C6F2198CB697D915CC42627040
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
Manifest number:          14BD
Signing time:             Tue 06 Oct 2026 04:00:44 +0000
Manifest this update:     Tue 06 Oct 2026 04:00:44 +0000
Manifest next update:     Wed 07 Oct 2026 04:00:44 +0000
Files and hashes:         1: FivG9rrBQqA6uxp62RaQaD8DpNw.crl (hash: NdrQ5WhQv0io9K3CfKOhaOiPMHM4tizdYgJdi9RRNQ4=)
                          2: OdjD6-jie1gU1V0cRR0FziitCAg.roa (hash: MfGipVuvx0N4+V17kShStGKfSKXkomrNYWFKpDB6GCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:5e:f8:c6:f2:19:8c:b6:97:d9:15:cc:42:62:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
        Validity
            Not Before: Oct  6 04:00:44 2026 GMT
            Not After : Oct  7 04:00:44 2026 GMT
        Subject: CN=714e0090647d096743f0778719ae0ab1a973fc9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:32:e7:c3:7e:08:b8:13:0a:85:41:0a:00:6c:
                    b3:19:43:de:f0:01:8c:0e:f9:b3:0e:4f:e5:95:21:
                    16:1d:ec:de:21:34:cd:63:74:08:aa:29:6e:3c:d9:
                    87:5f:d7:7a:5b:70:41:02:d0:31:c0:75:e2:37:c3:
                    b7:93:6f:ca:b4:95:c7:13:8e:24:c1:2c:a6:2a:69:
                    1e:b0:bf:82:41:40:92:8b:42:b4:0a:a3:c0:d7:3d:
                    a9:59:5f:31:d8:ee:ca:f9:83:28:ea:19:00:24:73:
                    e5:d1:60:6d:c5:0c:20:35:86:3c:d8:a4:b7:ff:ef:
                    77:9f:8c:4f:8c:7d:90:b8:da:c3:83:47:61:26:5e:
                    57:02:b2:ee:9b:ce:b5:d3:27:a8:90:f9:be:ec:e4:
                    ec:c0:58:1d:be:04:5d:bf:72:b7:9b:ab:6f:eb:da:
                    81:e6:a3:9d:be:f4:e5:34:36:e2:ce:d7:b5:90:b3:
                    51:ad:af:08:95:2b:21:8e:0a:b0:8e:a3:75:4c:9d:
                    1f:3c:de:50:a1:ff:37:44:1f:8c:6e:25:1f:b1:98:
                    c4:fa:71:b2:fa:d9:73:43:89:4b:3b:73:48:23:a7:
                    14:01:30:b3:a6:56:6f:7a:e4:84:db:42:2c:35:86:
                    8b:69:92:f8:a4:26:0e:4d:77:3b:82:cd:12:15:9b:
                    62:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4E:00:90:64:7D:09:67:43:F0:77:87:19:AE:0A:B1:A9:73:FC:9E
            X509v3 Authority Key Identifier:
                keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f5:8e:0f:06:8c:dc:79:02:a5:19:12:21:53:c3:b8:18:e3:
         8e:31:11:d9:c7:91:94:3a:0a:d8:2b:d5:00:03:57:2c:5a:9b:
         d6:7c:88:9e:4d:18:20:5f:69:12:2d:0d:76:ce:2e:45:9d:10:
         f5:59:c6:68:41:cc:3b:2a:92:f4:05:7a:d3:b1:0c:4d:06:6d:
         f1:c0:ca:94:2c:24:a8:af:22:3e:1f:7a:79:46:92:f2:b6:ca:
         c9:20:07:94:ba:74:0c:da:99:76:cd:99:19:16:3f:d7:47:9b:
         66:af:1f:7c:61:c8:12:66:c7:1f:7d:69:c7:7d:14:09:06:09:
         03:69:13:33:98:e1:3a:60:d5:b0:0e:f5:ec:4b:d4:89:a8:68:
         9f:d6:6b:6d:32:d7:8f:74:da:9e:98:5a:b1:89:e5:58:3f:91:
         fd:20:d0:00:3e:38:f8:e5:d1:0f:c9:23:2b:d9:9c:a0:7a:b6:
         2c:2b:73:cf:86:04:68:6b:5f:c5:98:3e:15:b3:4b:4b:28:16:
         15:d0:e0:c0:55:74:03:e3:40:5c:ae:bd:5a:60:50:d8:f3:3d:
         8c:ad:5d:e9:0b:9e:b5:cb:0f:ab:cb:f1:d6:e7:c9:fd:84:f3:
         e3:ef:29:2a:f7:b3:bf:63:cb:1a:9f:63:65:6f:88:22:0f:08:
         3a:00:60:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 09:24:43 2026 by rpki-client